Privacy Policy
Last updated: 29 June 2026
Who We Are
Nutridly is operated by Malik Systems Ltd, a company registered in England and Wales. Malik Systems Ltd is the data controller for the personal data processed through this platform.
Contact: privacy@nutridly.com
What Data We Collect
We collect the following categories of personal data:
- Account information, email address, name (via Clerk authentication)
- Health profile, age, biological sex, height, weight, health goals, conditions, medications, symptoms, eating patterns, dietary preferences, cooking preferences
- Nutrient test results, biomarker values from uploaded PDFs, pasted text, or manual entry. This is special category data under UK GDPR
- Meal plan data, generated recipes, selections, and recipe history
- Shopping list data, ingredient lists and pantry exclusions
- Family member data, nicknames and per-member profiles for household plans
- Payment information, processed by Stripe. We do not store card details
Lawful Basis for Processing
We process your personal data on the following bases under UK GDPR:
- Contract, to provide the Nutridly service you have subscribed to
- Explicit consent, for processing special category health data (nutrient test results). You provide this consent when uploading your results
- Legitimate interest, for service improvement and security
You may withdraw your consent to health data processing at any time by deleting your account.
How We Use Your Data
- To generate personalised meal plans and shopping lists based on your profile and nutrient data
- To analyse nutrient test results and identify areas where diet may help
- To track recipe history and ensure variety in your weekly plans
- To process payments and manage your subscription
Third Party Services
We share limited data with the following services to deliver Nutridly:
OpenAI
Receives anonymised health profile data and biomarker values to generate nutritional strategies and recipes. No names, email addresses, or identifying information is sent.
Stripe
Processes subscription payments and manages billing. Your card details are handled entirely by Stripe and never touch our servers.
Clerk
Provides authentication (sign in, sign up, account management). Stores your email address and login credentials.
Cloudflare
Hosts the Nutridly website and API. Uploaded files are stored in Cloudflare R2 storage with encryption at rest.
Neon
Hosts our database with encryption in transit and at rest. All connections use TLS.
Data Retention
Your data is retained for as long as your account is active. When you delete your account:
- All profile data, nutrient results, biomarkers, meal plans, shopping lists, and symptom history are permanently deleted
- Uploaded files are removed from cloud storage
- Stripe payment records are retained for 6 years as required by UK law
- AI-generated recipe images are retained as anonymised shared assets (they contain no personal data)
Your Rights
Under UK GDPR, you have the right to:
- Access your data, export all your data as a downloadable file from your Billing and Data page
- Rectify your data, edit your profile, update biomarker values, or re-upload results at any time
- Delete your data, permanently delete your account and all associated data from your Billing and Data page
- Port your data, download your data in a machine-readable JSON format
- Withdraw consent, stop all health data processing by deleting your account
- Opt out of reminder and check-in emails, via the unsubscribe link in any such email or the toggle on your Billing and Data page. You'll still receive your weekly meal plan and an email when your results arrive
- Complain, lodge a complaint with the Information Commissioner's Office (ICO)
Cookies
Nutridly uses essential cookies for authentication and session management, and Google Analytics 4 to understand which parts of the app people find useful. Analytics is loaded only if you accept on the banner shown on your first visit: decline and no Google script is requested and no analytics cookies are set. Your choice is stored on your own device; clear your site data to be asked again. We do not use advertising cookies, and we never send Google your health data.
Children
Nutridly is designed for users aged 18 and over. Family plan members under 18 must have their profiles created and managed by an adult account holder. We do not knowingly collect data from children under 13.
Changes to This Policy
We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or through a notice on the platform. The date at the top of this page shows when this policy was last updated.
Contact
For any privacy-related questions or to exercise your data rights, contact us at privacy@nutridly.com.
Malik Systems Ltd t/a Nutridly
United Kingdom